CVE-2026-97305

— UNSCORED

Published 2026-10-05 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2.

Weaknesses

CWE-639

All references

https://patchstack.com/database/wordpress/plugin/hyve-lite/vulnerability/wordpress-ai-chatbot-for-wordpress-hyve-lite-plugin-2-0-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2024-34323
MEDIUMCVE-2025-71420PoC
UNSCOREDCVE-2026-100177PoC
HIGHCVE-2026-100268
MEDIUMCVE-2026-100272
HIGHCVE-2026-100514
HIGHCVE-2026-100517
MEDIUMCVE-2026-100531PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.